Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/1zIXCoBPIJwWDfdMWaY49jDSjNw.roa
File: 1zIXCoBPIJwWDfdMWaY49jDSjNw.roa (raw, json)
Hash identifier: cTkVENeyw6aRJ6OgrMkjqED23bCka9HJ34+VglW3yxw=
Subject key identifier: D7:32:17:0A:80:4F:20:9C:16:0D:F7:4C:59:A6:38:F6:30:D2:8C:DC
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 01A08B949D4152A4D095B2C14A3B95A592E5
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/1zIXCoBPIJwWDfdMWaY49jDSjNw.roa
Signing time: Thu 10 Sep 2026 13:49:27 +0000
ROA not before: Thu 10 Sep 2026 13:49:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207027
IP address blocks: 2.59.176.0/22 maxlen: 22
193.37.34.0/24 maxlen: 24
193.176.220.0/24 maxlen: 24
193.193.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:94:9d:41:52:a4:d0:95:b2:c1:4a:3b:95:a5:92:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Sep 10 13:49:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d732170a804f209c160df74c59a638f630d28cdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:de:b2:8a:0d:be:e6:f5:af:85:bd:f1:11:1d:
15:2c:4e:9d:f2:84:ee:c4:c7:b5:b6:92:97:02:07:
82:8c:26:be:32:dc:33:fd:da:11:f5:32:b3:60:38:
45:36:13:c4:b2:16:8a:b0:b7:06:6c:42:6c:99:b5:
57:7b:22:82:5b:43:c4:8b:cb:ad:4f:69:c6:81:c9:
b0:9a:01:9c:d4:1f:87:cf:31:ce:86:d8:20:e0:d7:
e5:b8:48:ef:95:4d:dc:cd:b9:c9:29:cb:4e:b7:f7:
41:c1:9d:6a:ee:ab:be:82:27:cd:2a:45:83:9b:30:
22:33:cd:97:f8:0f:e3:f6:6b:3e:1e:08:65:c8:b9:
3f:ab:a3:d3:26:8e:50:83:95:0f:3b:7b:a3:bc:7e:
bf:27:e6:34:0b:b7:46:1b:ad:79:ae:db:f9:78:60:
65:53:0f:67:5e:d6:30:78:76:20:24:0f:78:fd:9b:
0b:69:c2:cc:3a:f3:3e:63:3a:c9:9c:86:57:13:93:
04:8d:4a:c2:eb:27:4a:43:d7:8f:9e:7c:43:47:27:
3e:b0:0b:bb:cb:9c:a7:ee:c2:00:1c:c0:f9:39:37:
9e:38:0b:90:09:84:e9:69:e9:c6:09:76:23:8a:b7:
76:0f:e0:c6:d6:ef:85:c2:5a:2f:9c:fc:5f:01:6e:
11:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:32:17:0A:80:4F:20:9C:16:0D:F7:4C:59:A6:38:F6:30:D2:8C:DC
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/1zIXCoBPIJwWDfdMWaY49jDSjNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.176.0/22
193.37.34.0/24
193.176.220.0/24
193.193.160.0/24
Signature Algorithm: sha256WithRSAEncryption
84:34:fb:48:ce:99:70:0d:4b:eb:ab:44:43:cf:a3:1f:34:9e:
21:9b:b6:70:6b:58:8c:50:ec:37:2d:4f:1b:a2:27:4b:21:0d:
01:32:42:58:e6:c8:da:3d:c9:69:e0:6c:3e:05:0f:25:81:2f:
11:db:45:1b:3e:c3:91:3c:a0:46:b0:f1:ea:b5:03:67:ab:25:
54:53:9a:5a:76:07:ce:53:89:0d:b3:1c:9e:cb:e2:40:04:f0:
40:de:ba:82:57:bc:a6:9d:29:5e:e5:91:97:b6:fe:d3:65:92:
c9:6c:ec:df:79:49:af:b3:cc:5f:ce:06:f0:bc:18:b1:14:e4:
1b:8e:ae:86:cc:df:60:a1:0d:4b:be:90:74:ce:33:9b:47:b2:
1a:be:0c:e7:5a:49:aa:48:27:ca:a2:4b:ec:3d:cf:09:a5:aa:
a5:21:f1:de:e3:b5:9b:dc:c2:0f:46:0e:66:8b:be:ab:55:36:
f8:f0:a5:87:df:03:6a:fd:cb:9a:3f:91:56:c0:48:1c:b1:7d:
af:91:07:1a:d2:c6:9d:56:a7:7d:fc:74:0a:e6:0a:ce:45:ad:
54:b6:5e:9f:ba:cd:f1:e0:9d:45:8a:7f:c6:0e:c9:d7:77:ef:
f1:8a:fb:5f:b8:b4:56:3b:75:cb:a8:e4:32:09:5f:3d:39:39:
5f:60:30:21
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAaCLlJ1BUqTQlbLBSjuVpZLlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw
N2VlNTYwHhcNMjYwOTEwMTM0OTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNzMyMTcwYTgwNGYyMDljMTYwZGY3NGM1OWE2MzhmNjMwZDI4Y2RjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAot6yig2+5vWvhb3xER0VLE6d8oTu
xMe1tpKXAgeCjCa+Mtwz/doR9TKzYDhFNhPEshaKsLcGbEJsmbVXeyKCW0PEi8ut
T2nGgcmwmgGc1B+HzzHOhtgg4NfluEjvlU3czbnJKctOt/dBwZ1q7qu+gifNKkWD
mzAiM82X+A/j9ms+HghlyLk/q6PTJo5Qg5UPO3ujvH6/J+Y0C7dGG615rtv5eGBl
Uw9nXtYweHYgJA94/ZsLacLMOvM+YzrJnIZXE5MEjUrC6ydKQ9ePnnxDRyc+sAu7
y5yn7sIAHMD5OTeeOAuQCYTpaenGCXYjird2D+DG1u+FwlovnPxfAW4RJQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFNcyFwqATyCcFg33TFmmOPYw0ozcMB8GA1UdIwQY
MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt
OGJmYmRkNDVjYjYyLzEvMXpJWENvQlBJSndXRGZkTVdhWTQ5akRTak53LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy
LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCAjuwAwQA
wSUiAwQAwbDcAwQAwcGgMA0GCSqGSIb3DQEBCwUAA4IBAQCENPtIzplwDUvrq0RD
z6MfNJ4hm7Zwa1iMUOw3LU8boidLIQ0BMkJY5sjaPclp4Gw+BQ8lgS8R20UbPsOR
PKBGsPHqtQNnqyVUU5padgfOU4kNsxyey+JABPBA3rqCV7ymnSle5ZGXtv7TZZLJ
bOzfeUmvs8xfzgbwvBixFOQbjq6GzN9goQ1LvpB0zjObR7IavgznWkmqSCfKokvs
Pc8JpaqlIfHe47Wb3MIPRg5mi76rVTb48KWH3wNq/cuaP5FWwEgcsX2vkQca0sad
Vqd9/HQK5grORa1Utl6fus3x4J1Fin/GDsnXd+/xivtfuLRWO3XLqOQyCV89OTlf
YDAh
-----END CERTIFICATE-----
Generated at Fri Sep 11 03:49:14 2026 by rpki-client